Skip to content
OpenAdvisories

Product · getgrav

grav-plugin-admin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2021-21425 Public exploit EPSS 80%

    Unauthenticated Arbitrary YAML Write/Update leads to Code Execution

    Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials. Partic…

    getgrav grav-plugin-admin